Security Lead
Who We Are
The Solana Foundation is a non-profit based in Zug, Switzerland, dedicated to the adoption, decentralization, and security of the Solana network. Solana is a high performance blockchain that can deliver a fast and friendly user experience, without sacrificing security. The Solana Foundation is working to realize a world where individuals own their data, use permissionless networks, and transfer information and value freely around the world. We are looking for talented people who are willing to jump right in and use their expertise to help the ecosystem build.
The Opportunity
We are looking for an experienced Network Security Lead to own security strategy and execution across both the Foundation’s internal onchain program operations and the broader Solana ecosystem. This role spans both an internal security posture and an external security leadership role to drive measurable security improvements across the Solana ecosystem by designing and socializing open-source security frameworks, reference architectures, and tooling.
You’ll be in charge of ensuring Solana Foundation follows institutional security best practices and creates exportable patterns the wider ecosystem can follow. You’ll also lead the effort to push security as a major priority in the ecosystem by publishing frameworks, guidance, and reports grounded in real data.
To be successful in this role
A successful candidate must have a very strong understanding of security best practices on Solana. You will document secure multisig, supply-chain attacks, release pipelines, and implement mitigation strategies that meet institutional-grade standards. Publishing external security guidance or frameworks for external teams to elevate our security practices in the ecosystem will be crucial for the success of Solana.
You ideally have
3+ years of experience in a full-time software engineering role.
Hands-on experience with Solana’s programming model and its upgrade mechanisms.
Deep technical background in securing decentralized systems, including low-level network design, state machine security, and smart contract audit governance.
Manage all internal security audits and ensure continuous readiness to meet the stringent security requirements of the onchain economy.
Experience publishing security advisories, frameworks, or public-facing security content.
Familiarity with incident response processes and post-mortem analysis in crypto or web3 contexts.
Existing relationships with security researchers, audit firms, or bug bounty platforms within the Solana ecosystem.
Expertise in developing and executing threat model exercises and disaster recovery playbooks